Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/ayobIvDu2Ln8jJKen4JQAcEbHpo.roa
File:                     ayobIvDu2Ln8jJKen4JQAcEbHpo.roa (raw, json)
Hash identifier:          FOdMOc3Ys8Mucr32ybUpaTYLabPymcEVZV19p6xTKyw=
Subject key identifier:   6B:2A:1B:22:F0:EE:D8:B9:FC:8C:92:9E:9F:82:50:01:C1:1B:1E:9A
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       018C000D01922183332BEF8B529DA0817D38
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/ayobIvDu2Ln8jJKen4JQAcEbHpo.roa
Signing time:             Fri 24 Nov 2023 06:38:21 +0000
ROA not before:           Fri 24 Nov 2023 06:38:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.220.146.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Dec 2023 07:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:00:0d:01:92:21:83:33:2b:ef:8b:52:9d:a0:81:7d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Nov 24 06:38:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6b2a1b22f0eed8b9fc8c929e9f825001c11b1e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:03:6a:97:08:8a:e7:d2:f8:d5:52:7c:cf:
                    b4:17:97:05:30:5f:9b:9d:12:7c:b1:7d:ce:3f:e2:
                    58:96:f3:b8:a2:c2:7a:67:5f:22:33:83:90:81:5b:
                    f3:d7:a2:ad:cd:9d:42:77:0d:64:19:9b:48:4c:d3:
                    a4:81:18:36:ce:63:bb:53:6d:ba:6e:08:68:01:e4:
                    bf:b4:a6:fd:7b:01:bd:d2:aa:aa:ab:e1:46:e5:1a:
                    c6:60:e6:ca:83:74:6b:9c:c8:3b:21:76:d1:89:5f:
                    44:76:9b:cf:b3:98:87:6f:3a:b9:52:17:9b:d6:3e:
                    9a:b0:64:26:15:b9:dc:8f:5a:da:50:4f:47:b8:bd:
                    24:06:08:25:07:4a:a2:b1:ed:c0:0e:d4:b2:b9:58:
                    ad:9a:78:9b:5e:e3:05:17:c2:a2:0e:0d:ad:3a:23:
                    62:01:44:86:96:ad:0a:1c:9b:15:11:a4:4a:e8:7f:
                    60:12:1a:ba:2f:1d:9a:50:86:82:8c:21:ef:d9:62:
                    23:a0:e9:db:3d:7e:56:52:e5:d1:9e:52:e7:5e:8f:
                    85:99:b7:01:68:15:1c:0a:8a:a6:85:f2:60:41:dd:
                    ac:9e:b7:56:0e:35:19:22:e6:8e:91:a3:41:53:13:
                    2b:25:4c:ec:80:44:0d:9e:3e:51:c1:61:39:cf:02:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2A:1B:22:F0:EE:D8:B9:FC:8C:92:9E:9F:82:50:01:C1:1B:1E:9A
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/ayobIvDu2Ln8jJKen4JQAcEbHpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:d6:27:ae:55:7b:73:db:68:c7:23:d4:3e:96:56:22:1e:3b:
         1c:2b:8d:10:2c:ae:56:7f:a2:9f:53:03:9c:13:3f:3d:8b:2c:
         ea:6b:dd:11:81:02:e2:91:9a:f6:ee:f7:5d:c6:c8:2d:ce:1e:
         54:95:7a:8c:e6:08:07:80:c3:b8:7e:6b:b1:58:69:f3:3d:c3:
         b9:3e:fd:39:d0:87:de:cf:41:52:a1:6f:05:61:94:aa:86:53:
         ab:9c:eb:76:7b:63:30:b3:36:60:6e:d9:71:37:a8:ee:f6:97:
         b4:a5:63:9c:71:b8:56:38:12:3c:49:03:87:7e:08:93:0c:fa:
         ac:79:e8:5b:45:05:7a:ae:88:16:98:14:44:f7:4e:89:08:ca:
         46:8c:75:4b:87:d2:0d:98:fb:f7:b8:b9:8f:ed:fe:1e:97:2b:
         cf:40:27:27:b7:04:3e:31:ce:d5:90:fe:a9:5f:b4:f9:8c:4a:
         05:ae:91:07:5a:81:f3:ab:31:0a:90:f5:af:3d:e6:d9:09:ef:
         5e:93:bc:a6:db:c4:56:d7:50:97:cc:8d:70:51:66:69:b1:8a:
         a4:66:1d:3f:b6:eb:40:aa:b6:63:99:98:b3:1d:5a:71:7f:18:
         61:c1:e1:18:16:ec:90:72:c9:38:19:46:27:5e:e8:2c:c0:fa:
         f1:4c:0a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org